{
  "osquery_time": "1592478128",
  "datetime": "2020-06-05T12:31:06.0151594Z",
  "source": "Security",
  "provider_name": "Microsoft-Windows-Security-Auditing",
  "provider_guid": "{54849625-5478-4994-a5ba-3e3b0328c30d}",
  "event_id": "5382",
  "task_id": "13824",
  "level": "0",
  "keywords": "0x8020000000000000",
  "data": "{\"EventData\":{\"SubjectUserSid\":\"S-1-5-18\",\"SubjectUserName\":\"WIN-VJP8LBM74F9$\",\"SubjectDomainName\":\"WORKGROUP\",\"SubjectLogonId\":\"0x3e7\",\"SchemaFriendlyName\":\"NGC Local Accoount Logon Vault Resource Schema\",\"Schema\":\"{1d4350a3-330d-4af9-b3ff-a927a45998ac}\",\"Resource\":\"NGC Local Accoount Logon Vault Resource\",\"Identity\":\"010500000000000515000000620479610991A87285127E7BE9030000\",\"PackageSid\":\"\",\"Flags\":\"0\",\"ReturnCode\":\"1168\",\"ProcessCreationTime\":\"2020-06-05T12:31:05.9732070Z\",\"ClientProcessId\":\"6664\"}}",
  "computer_name": "DESKTOP-4AR7BIA"
}
